
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ae0655f7-59aa-3303-b0b9-def21bc14075.roa
File: ae0655f7-59aa-3303-b0b9-def21bc14075.roa (raw, json)
Hash identifier: DZ33RPrFRGISTlZ/hX2sMp38oI7wfLOYa5A/PrfLK3o=
Subject key identifier: 21:9B:BF:DB:04:12:C6:B6:BB:B4:30:C6:7D:A1:49:6C:B7:E1:1C:3E
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328584F03A84E5A5AD182CB6DE57B80
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ae0655f7-59aa-3303-b0b9-def21bc14075.roa
Signing time: Mon 31 Aug 2026 01:00:12 +0000
ROA not before: Mon 31 Aug 2026 01:00:12 +0000
ROA not after: Sun 29 Nov 2026 02:00:12 +0000
asID: 7029
IP address blocks: 207.155.100.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 01 Oct 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:03:a8:4e:5a:5a:d1:82:cb:6d:e5:7b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Aug 31 01:00:12 2026 GMT
Not After : Nov 29 02:00:12 2026 GMT
Subject: CN=3b7f8c8a-06c0-45a5-9a07-edc2cdf3598a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:0c:b8:71:a2:73:fb:08:2c:8d:aa:fb:9e:36:
a9:d1:51:bc:ba:6c:f0:bd:e2:8c:ed:f3:98:3d:42:
ac:18:30:4b:c3:b0:51:97:5a:fc:b9:60:07:c2:84:
c2:87:9d:1f:73:56:56:e2:2b:35:d1:ab:e2:ee:d6:
ce:4d:f5:f5:42:ea:06:4a:15:3a:6b:2f:7e:ef:08:
6f:2d:06:c2:6b:e0:06:69:38:fc:4b:2c:73:5e:4e:
12:4f:7b:cb:c2:4e:05:89:ff:64:07:f9:6b:bd:70:
01:e8:1d:8f:bb:65:b1:72:6f:83:75:9c:c2:b0:3f:
ac:65:b3:d3:86:ae:b8:c1:c0:09:bd:a6:d7:6e:47:
1c:89:38:a5:b2:a4:64:56:a5:cb:73:c6:71:09:68:
f7:c4:76:7f:9c:d4:c3:ef:e2:e6:b6:57:a4:35:4e:
af:02:f5:24:8d:60:7a:6b:4c:42:24:c5:b5:3d:fc:
c5:6b:28:13:86:a2:f4:cf:ca:40:2e:56:c1:e5:88:
a8:55:49:09:3e:da:dd:b8:6d:53:96:4e:4f:d1:c5:
04:ea:2c:7e:6c:d8:32:10:1e:a5:b6:ee:97:96:84:
40:ab:ff:c8:db:42:9d:b3:6d:7f:7b:fd:bc:50:e5:
c5:8e:8b:9b:05:32:26:a3:0a:c5:73:61:a5:04:e6:
63:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:9B:BF:DB:04:12:C6:B6:BB:B4:30:C6:7D:A1:49:6C:B7:E1:1C:3E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ae0655f7-59aa-3303-b0b9-def21bc14075.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
207.155.100.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0e:11:02:be:99:85:f8:c4:bb:b6:03:a3:de:07:fe:1a:2a:1c:
0f:78:b4:d7:5f:9c:28:29:bc:df:10:31:6f:c9:1b:82:a1:cd:
3b:63:13:a7:17:70:46:c5:55:64:09:04:9a:2d:3a:e1:ff:bc:
24:59:ff:2c:7d:4c:f1:7f:0c:84:55:3c:3c:6a:7e:72:79:b4:
85:90:65:8f:86:73:dd:6a:55:c2:cd:0a:2b:62:94:66:f1:bc:
3b:8f:4c:a3:da:71:37:44:b7:66:ba:27:16:e6:3d:01:f0:db:
56:50:8e:d4:89:65:4f:ce:ac:2b:dc:d9:2c:e9:69:eb:b4:ad:
4d:6c:79:95:31:17:fc:23:ca:6f:a0:ad:e6:2b:df:e4:d1:4d:
42:40:8c:57:ac:36:b7:95:51:fd:18:0b:b7:9d:bd:04:b7:f0:
d6:eb:e5:ed:7e:52:32:2f:a0:e7:8d:c4:e2:a5:ca:54:74:1b:
4e:c8:db:bd:72:cb:54:d7:37:01:8a:7f:30:1a:74:52:bc:9a:
52:47:94:38:e4:b2:11:ed:21:7b:48:6b:b9:5d:44:48:2a:c1:
f0:7f:0c:8f:47:2c:76:7d:83:12:a6:7b:5d:46:43:56:68:09:
66:92:b7:f9:44:4b:9a:76:91:f1:bb:f9:21:33:8b:e0:c1:4d:
f5:df:df:79
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8DqE5aWtGCy23le4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi
MmQzMB4XDTI2MDgzMTAxMDAxMloXDTI2MTEyOTAyMDAxMlowLzEtMCsGA1UEAxMk
M2I3ZjhjOGEtMDZjMC00NWE1LTlhMDctZWRjMmNkZjM1OThhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwgy4caJz+wgsjar7njap0VG8umzwveKM7fOY
PUKsGDBLw7BRl1r8uWAHwoTCh50fc1ZW4is10avi7tbOTfX1QuoGShU6ay9+7whv
LQbCa+AGaTj8SyxzXk4ST3vLwk4Fif9kB/lrvXAB6B2Pu2Wxcm+DdZzCsD+sZbPT
hq64wcAJvabXbkcciTilsqRkVqXLc8ZxCWj3xHZ/nNTD7+LmtlekNU6vAvUkjWB6
a0xCJMW1PfzFaygThqL0z8pALlbB5YioVUkJPtrduG1Tlk5P0cUE6ix+bNgyEB6l
tu6XloRAq//I20Kds21/e/28UOXFjoubBTImowrFc2GlBOZjJQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCGbv9sEEsa2u7Qwxn2hSWy34Rw+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk
NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYWUwNjU1ZjctNTlhYS0z
MzAzLWIwYjktZGVmMjFiYzE0MDc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk
NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1
YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3
M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz5tkMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAA4RAr6ZhfjEu7YDo94H/hoqHA94tNdfnCgpvN8QMW/JG4KhzTtjE6cX
cEbFVWQJBJotOuH/vCRZ/yx9TPF/DIRVPDxqfnJ5tIWQZY+Gc91qVcLNCitilGbx
vDuPTKPacTdEt2a6JxbmPQHw21ZQjtSJZU/OrCvc2Szpaeu0rU1seZUxF/wjym+g
reYr3+TRTUJAjFesNreVUf0YC7edvQS38Nbr5e1+UjIvoOeNxOKlylR0G07I271y
y1TXNwGKfzAadFK8mlJHlDjkshHtIXtIa7ldREgqwfB/DI9HLHZ9gxKme11GQ1Zo
CWaSt/lES5p2kfG7+SEzi+DBTfXf33k=
-----END CERTIFICATE-----
Generated at Tue Sep 29 17:58:29 2026 by rpki-client